HIGH severity: CVE-2026-9702 in InPost PL WordPress plugin (<1.9.1) lets unauthenticated attackers redirect WooCommerce order shipping. No patch yet — restrict access, monitor for changes. Details: https://radar.offseq.com/threat/cve-2026-9702-cwe-284-improper-access-control-in-i-050e346ad7520813 #OffSeq #WordPress #Vulnerability #Ecommerce